CVE-2024-29216

The cg6kwin2k.sys driver, provided by Sangoma Technologies for the CG/MG family, is vulnerable to an insufficient access control issue (CWE-782/CWE-522) in its IOCTL handler. An attacker with local access but without administrator privileges can send a specific IOCTL request to perform I/O to arb...

CVE-2024-29216: Insufficiently Protected Credentials

Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOCTL request, a user without the administrator privilege may perform I/O to arbitrary hardware port or physical address, resulting in erasing or altering the firmware...